VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 21, 2011· Updated Jun 16, 2026

CVE-2011-1046

CVE-2011-1046

Description

IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.

Affected products

15
  • IBM/Business Process Manager
    cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*
  • IBM/Filenet P8 Content Engine13 versions
    cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.12:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.13:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:5.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.0.1-5.0.0
  • IBM/Filenet P8 Content Manager
    cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.